Security is not a product, but a process.

learn more… | top users | synonyms (1)

1
vote
1answer
59 views

Getting heavy traffic from random IP addresses

Digital ocean closed my droplet dude to have traffic on droplet. I made a new droplet(instance) and I am facing the same issue again. My nginx access.log is full of random ip address trying to make ...
0
votes
1answer
79 views

Why are some big corporations still worried about cloud security? [closed]

My company sells an app subscription, which is hosted as SAAS on Amazon Cloud. I have had a few clients who weren't very keen on uploading their documents to my product because my product is hosted ...
0
votes
1answer
34 views

Apache2 HPKP without HSTS

Is there a way to use public key pinning without HTTP Strict Transport Security? Both protocols (http and https) are configured via a respective vhost I need the HTTP connection for an old program, ...
0
votes
0answers
12 views

IIS to SQL Server IPSec configuration

I'm trying to configure 2 servers on a VPC on Amazon AWS to use IPSec. One server has Win2008 R2 with SQL Server 2008 and the other one is a Win 2012 R2 with IIS. I want to secure the connection ...
0
votes
1answer
27 views

IIS Request Filtering per Site

I need to disable my IIS server serving out certain files, i stumbled across Request Filtering but for some reason i cant get it to work on a per site basis. I believe that my website is inheriting ...
-1
votes
2answers
68 views

Vmware Got Hit By Brute Force More Than 60K Attempt

I have a vmware with 2012 server in it. Recently int he vsphere seens alot of attempt. Smells like a brute force. I understand that Security.AccountUnlockTime exists in the ESXi 6.0 that has a lockout ...
-5
votes
2answers
50 views

Does UDP includes of source address?

Both UDP and TCP does not include source address, but how does it say UDP IP spoofing is easier than TCP? For example, the following webpage also says about UDP vulnerability. "Unlike TCP, UDP does ...
0
votes
2answers
41 views

Change apache ssl configuration to nginx config

I want to ask your help to change my apache ssl config to nginx style. Actually i have tried it a googled but SSLEngine on SSLCertificateKeyFile /etc/apache2/ssl/key/netlime_tk.key ...
0
votes
1answer
201 views

MikroTik Configuration - Add a Public Wireless Router (internet only) to Office LAN

Goal Provide internet access for employees' personal devices without providing access to the internal network. Equipment Netgear WNDR4500v2: Wireless router intended for the guest network (has ...
4
votes
0answers
32 views

ransom email, followed by DDos attack [duplicate]

2 days ago, we received an ransom email from Armada Collective, followed by 1 hour of DDos attack. This group has been in the news recently ...
2
votes
1answer
48 views

fail2ban rules not coming into effect

I have installed the Apache web server on a stock installation of Ubuntu 14.04, and I am trying to use fail2ban to block requests that check for vulnerabilities. I have put the following in ...
0
votes
0answers
24 views

Our server is launching brute force attacks on other websites, please advise [duplicate]

Misc Situation: -Server login is obtained by hacker, hacker places malicious brute force file in /hacked/bruteforce/ -Server password is then changed, hacker can still run script by navigating to ...
-2
votes
1answer
44 views

Lock Down Linux SSH Users

I am wondering if there is a simple way to restrict ssh users accesses so they can only cd to only three directories. /tmp /home/UserID /opt/apps It would also be useful if we could remove ...
0
votes
0answers
63 views

Missing Secure Flag & HttpOnly Flag From Exchange 2013 OWA

I have got a request from one of my clients asking me to add the following flag to OWA's web.config file but I am unable to find the whole flag in the first place. I guess the flag exists in ...
1
vote
1answer
55 views

AWS, NodeJS - Connecting app to Mongodb on another EC2 instance

I am trying to connect my app, running on one EC2 instance, to MongoDB, running on another EC2 instance. I'm pretty sure the problem is in the security settings, but I'm not quite sure how to handle ...
0
votes
1answer
28 views

AV CLI Scanner for Linux [closed]

I need an Anti Virus CLI Scanner for a standalone server (without internet access). OS is RHEL 7, but it must be able to scan windows file systems (for a windows viruses). I'm using a ClamAV, but I ...
1
vote
0answers
57 views

EC2 automatic windows updates disabled by default on Windows Server 2008 R2 - why?

I spun up an Amazon virtual instance for Windows 2008 R2 Datacenter Edition and when I went into Windows Updates in control panel, automatic updates were turned off. I turned them on and checked for ...
1
vote
1answer
518 views

SSH everywhere without password, as administrator, is this a good idea?

I have worked in places where it is a common practice to be able to move between all servers, with SSH, as administrator without passwords. There are usually a couple of servers, which by their nature ...
-1
votes
1answer
25 views

Practical effects of setting dev.example.com to 127.0.0.1

The idea is to point a DNS entry to 127.0.0.1, so that it's possible to test "inline installation" of browser extensions. Here's an example service that does this: http://readme.localtest.me/ I'm ...
-2
votes
2answers
46 views

Risks of not updating an Ubuntu server on a local network?

Through work I recently came across a server that is used by 10-20 users daily as a sort of web server. It is running Ubuntu 12 and it has not been updated for a very long time it seems. Currently ...
0
votes
0answers
16 views

Separate domain admin accounts - are password tokens stored for run-as?

I am considering separating our domain admin accounts as suggested in this previous thread. However, are password tokens stored for "run as" instances? If so, running MMC and other tools with "run ...
1
vote
2answers
37 views

Reverse proxies and ssl, should I use the same certificates

Currently I'm using nginx as a reverse proxy over https and everything that is proxied is itself over https. SSL termination happens at Nginx and since the traffic is over https it get encrypted again ...
1
vote
2answers
53 views

.htaccess deny/allow rules denying folder, but not direct to files

We have a .htaccess file in a folder configured with deny,allow as follows: Order deny,allow Deny from all Allow from <whitelist IP> Allow from <whitelist IP> .... There are no other ...
1
vote
2answers
110 views

Knockd daemon fails to start

I was trying to setup knockd, a port knocking daemon available to Ubuntu distros. Before setting up my port knocking sequences, I decided to give a shot to the default knocking sequence, since it ...
0
votes
1answer
48 views

Office 2010 GPO - Block macros, but still warn about them?

I'm planning on setting up a GPO to disable any unsigned macros in Office 2010 documents. Seems easy enough: Disable all except digitally signed macros: The application displays the Trust Bar for ...
0
votes
1answer
40 views

Nginx & PhpMyAdmin standard practices

I'm currently migrating a small dev server from Apache to Nginx and I'm wondering about the "standard" way to manage PhpMyAdmin : I've simply symlinked the phpmyadmin folder to my nginx site root ...
0
votes
2answers
88 views

Logs: “Received disconnect from…” without the “Accepted” couterpart

I'm seeing lots of logs with this line: Nov 7 03:47:41 s1 sshd[23430]: Received disconnect from XX.XXX.XX.XX: 11: Nov 7 05:08:16 s1 sshd[24474]: Received disconnect from XX.XXX.XX.XX: 11: Nov 7 ...
0
votes
1answer
45 views

Track web application access through windows server

I have a web application running on Amazon EC2 accessed on the port 80. I would like to track the users who have accessed my application via windows server log. However when i go on the logs i can ...
0
votes
1answer
41 views

Hyper-V 2012 EAL 4 certified

Is the Hyper-V 2012 (R2) hypervisor EAL4 certfified? I only found an EAL4 certification for Hyper-V 2008, but not for newer products.
1
vote
2answers
40 views

I am unable to deny server filesystem access with a custom DocumentRoot in Apache?

CentOS 7.1 - Apache 2.4.6 Default configuration contains the following: .... <Directory /> AllowOverride none Require all denied </Directory> ... DocumentRoot "/var/www/html" ...
0
votes
1answer
34 views

Did I comprimise this server? [duplicate]

A few days I was working on a new feature on a form. The photo uploader on the form only accepts jpegs, jpgs, and png files. I went to upload a photo on my desktop and accidently selected a PHP file ...
0
votes
0answers
38 views

Prevent my website from being displayed under foreign domains

I'm not sure what's happening but i've just found, that someone has registered domain name *-auth.ga that displays my website. I'm not sure how can i block that kind of issue, i don't just want to ban ...
0
votes
2answers
89 views

AWS Security Groups vs Windows Firewall

Is it considered best practice to disable the Windows Firewall on an Amazon EC2 instance, and control traffic only via EC2 Security Groups? If I open a port on the server firewall, and then open the ...
0
votes
1answer
28 views

Prevent Coldfusion server from writing uploaded files to disk

Coldfusion writes uploaded files to it's temporary folder, where the cffile tag will pick it up. However I want my server to ignore uploaded files and not have them written to disk at all. How can I ...
1
vote
0answers
45 views

Allowing IIS_IUSRS to encrypt & decrypt files [closed]

I have a simple ASP.NET site (on Windows Server 2012 R2 & IIS 8.5) for uploading files to a server. I would like to automatically encrypt these files using Windows' built-in Cryptographic Service ...
1
vote
0answers
19 views

Ubuntu, determine urgency of kernel patches to better control when systems need reboots

I'm using Ubuntu 14.04 I'm currently using unattended-upgrades to apply security patches to my systems. I've found that kernel patches are pretty frequent -- roughly 1 - 2 per week -- and of course ...
2
votes
0answers
27 views

Forced to change expired password when using ssh key

I am working in an environment where I have an account on multiple linux machines where accounts and passwords are managed independently (no active directory/LDAP/etc) and passwords expire every 30 ...
2
votes
1answer
56 views

Detecting/preventing malicious outlook rules

Attackers like to abuse Outlook for a variety of purposes. For example, an attacker could auto forward emails to a remote address or persist inside a network by creating client-side rules that ...
0
votes
0answers
22 views

If cron as www-data/apache user have security issue?

Last year I checkout a server where I found some exploit bash script in /tmp folder which download a binary file from 3rd party server. When I further checked it, I found apache user's cron entry for ...
0
votes
2answers
108 views

permission denied on authorized_keys

I am attempting to set up SFTP for chrooted users, and use SSH public key authentication. In this example I'll be working with the dummy user "globocorp" who's a member of "sftpusers". This user is ...
-4
votes
3answers
75 views

If no service is listening on a port can a system still be accessed using that port? [closed]

If I have a linux server with a FW rule (iptables) to allow inbound to a particular port does a service have to be running and listening to accept that connection or is there another way to access the ...
0
votes
0answers
28 views

Securing ports on Linux with multi-factor authentication

I have dedicated Ubuntu server in the Internet so I want to: Connect to my server via HTTP(s) Input password and MFA token (i.e. Google Authenticator token) If both are correct, server executes ...
1
vote
1answer
25 views

Allowing Pubkey OR Password Authentication for Chrooted users

I manage a legacy system that numerous clients connect to in order to consume large files of scientific data. Currently these users connect via SFTP, and because of the huge diversity of experience ...
0
votes
1answer
96 views

How to prevent password expiration in apache Archiva

I am running a standalone Archiva 2.2.0 installation. I added security.properties file to ~\conf directory. In security.properties I defined: security.policy.password.expiration.days=999999 ...
1
vote
2answers
55 views

How to secure network against connecting bad device with DHCP?

I have a network with 500+ computers, at my area there is lots of cooperation companies that sometimes bring their own routers. If they do it in sneaky way and do not turn off DHCP service on the ...
1
vote
4answers
277 views

Webserver exposes client real IP address in OpenVPN network

One of our corporate websites run on Linux server, built with Apache2 and PHP5. Several web pages can only be accessed from OpenVPN subnet (addresses 10.8.0.1/24). To check each request, php script ...
0
votes
2answers
77 views

Not getting credential prompt on Win Server 2012 for Ubuntu Samba share

I set up a share in Ubuntu with read/write permissions using system-config-samba. I configured my user to also be a smbuser. On all of my other systems (2 Win10, 1 Win8, 1 Ubuntu) I am prompted to ...
2
votes
1answer
91 views

Powershell Remoting security implications by adding users to WinRMRemoteWMIUsers

In our current workflow, we have to RDP to several servers just to know if a service is up-and-running. We do not have admin rights to those servers but are allowed to view, start and stop services. ...
0
votes
1answer
23 views

Cassandra security using openssl (not keytool)

I saw Cassandra documentation. http://docs.datastax.com/en/cassandra/2.1/cassandra/security/secureSSLCertificates_t.html I found this line "SSL certificates must be generated using keytool". But I ...
2
votes
0answers
108 views

Spring Shiro is not authenticating login screen in SpringMVC web application

I am trying to use Apache Shiro framework 1.2.4 for security requirements of our Spring MVC web application. I have included configuration details in the application context, pom.xml and web.xml ...